Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dcd227da-b4cc-39a7-8f81-cf2ca81a847a.roa
File:                     dcd227da-b4cc-39a7-8f81-cf2ca81a847a.roa (raw, json)
Hash identifier:          bRHjht2iyKMNYv0ljKvCtRrEml0SsOXLnjiodi0zZj4=
Subject key identifier:   47:CB:F6:88:CE:A5:2E:1E:3E:83:12:57:59:AD:89:CB:B7:DE:50:10
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583D341C51E06D255F4290C8EA00
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dcd227da-b4cc-39a7-8f81-cf2ca81a847a.roa
Signing time:             Fri 11 Mar 2022 05:00:00 +0000
ROA not before:           Fri 11 Mar 2022 05:00:00 +0000
ROA not after:            Fri 15 Apr 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        54.134.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:34:1c:51:e0:6d:25:5f:42:90:c8:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Mar 11 05:00:00 2022 GMT
            Not After : Apr 15 04:00:00 2022 GMT
        Subject: CN=7c5d1d41-48d7-440e-bfec-fb22b35b38ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:54:f0:aa:f0:b5:3d:84:35:b7:72:ea:34:c0:
                    39:3b:63:a9:e3:78:50:cc:8d:d7:62:39:ca:49:b3:
                    7a:41:91:3f:46:69:44:3c:29:6c:02:bc:aa:60:65:
                    20:2c:39:51:4d:3f:d5:84:e1:01:14:bd:a8:17:ef:
                    7c:da:89:ce:8f:87:28:6d:15:25:90:10:9f:70:c2:
                    3a:68:7b:4a:f8:fe:d9:0a:88:7f:77:6c:46:d7:61:
                    f4:d9:df:90:6c:0c:42:8a:d0:78:86:7f:83:75:58:
                    a0:91:57:4a:39:91:b7:13:b8:0f:34:71:08:55:f8:
                    54:52:08:d8:58:7e:a7:0b:da:47:b5:d9:74:89:65:
                    ae:4a:6b:c0:21:2b:2f:2e:91:a1:a4:a0:10:52:f9:
                    59:17:32:b7:48:05:84:d4:cd:cc:e5:33:f0:33:a4:
                    e8:8d:b3:86:ed:c6:bb:cd:a4:a9:ba:f2:9d:b0:ee:
                    aa:08:ef:32:13:37:c9:96:28:1f:a0:2c:ad:f8:0f:
                    c6:82:c0:7c:d2:0c:7f:a7:89:eb:1a:92:5d:8e:79:
                    6e:85:4c:23:39:d6:21:b8:44:af:eb:57:35:03:37:
                    18:5c:49:02:ba:11:5e:83:4e:d5:94:ea:26:74:64:
                    a2:30:84:20:14:d5:ac:5e:74:b7:0d:d0:f2:c9:68:
                    96:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CB:F6:88:CE:A5:2E:1E:3E:83:12:57:59:AD:89:CB:B7:DE:50:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/dcd227da-b4cc-39a7-8f81-cf2ca81a847a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.134.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:fd:09:c3:96:f5:29:ba:cf:89:0a:45:57:8d:a2:3d:c1:92:
         4e:e3:19:46:49:50:b0:54:44:8b:e1:51:b2:0b:c3:11:a7:a2:
         11:9c:b5:b9:37:12:64:4b:ee:88:0a:8e:70:15:cf:a0:4c:da:
         67:12:e5:0f:4f:dd:9a:a9:3f:b6:b9:91:f7:fc:32:92:64:63:
         0f:2d:c7:b5:d9:cc:23:b8:91:fe:69:d6:c5:e0:e1:7d:94:36:
         09:5e:82:97:4f:02:63:ec:58:5f:0a:7b:37:ad:cd:c7:15:f5:
         3f:89:ad:e6:d3:ac:ff:bf:35:10:a4:a4:51:79:14:f3:5f:e3:
         7b:cd:8a:11:2a:3f:cc:eb:15:fb:ba:6b:f9:5b:8d:15:63:be:
         39:2d:a9:c6:d5:ca:0a:bb:bf:fa:00:a5:2d:d6:f0:cb:1a:85:
         d3:a2:06:a0:13:b8:6e:3d:63:78:be:41:4e:54:4f:52:fc:a6:
         27:c3:9c:b4:9c:e6:64:9e:35:6f:a6:0c:2a:15:6a:f4:2c:99:
         e1:d9:fa:ae:bc:27:66:56:ff:9b:69:5b:8e:e1:8b:d9:de:86:
         8b:1e:20:df:36:29:0a:6e:34:6c:86:33:51:a8:f5:9c:bc:f3:
         91:4e:6d:6b:af:15:1e:2f:43:a3:2b:25:53:1c:37:2f:4f:e9:
         e3:36:a6:3b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD00HFHgbSVfQpDI6gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiYzk5ZDQtODEzOS00ODBiLTkzZDAtMWZmODZmYmEw
NGYyMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
N2M1ZDFkNDEtNDhkNy00NDBlLWJmZWMtZmIyMmIzNWIzOGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1TwqvC1PYQ1t3LqNMA5O2Op43hQzI3XYjnK
SbN6QZE/RmlEPClsAryqYGUgLDlRTT/VhOEBFL2oF+982onOj4cobRUlkBCfcMI6
aHtK+P7ZCoh/d2xG12H02d+QbAxCitB4hn+DdVigkVdKOZG3E7gPNHEIVfhUUgjY
WH6nC9pHtdl0iWWuSmvAISsvLpGhpKAQUvlZFzK3SAWE1M3M5TPwM6TojbOG7ca7
zaSpuvKdsO6qCO8yEzfJligfoCyt+A/GgsB80gx/p4nrGpJdjnluhUwjOdYhuESv
61c1AzcYXEkCuhFeg07VlOomdGSiMIQgFNWsXnS3DdDyyWiWCQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEfL9ojOpS4ePoMSV1mticu33lAQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJj
OTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4NmZiYTA0ZjIvZGNkMjI3ZGEtYjRjYy0z
OWE3LThmODEtY2YyY2E4MWE4NDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGFiYzk5ZDQtODEzOS00ODBiLTkz
ZDAtMWZmODZmYmEwNGYyLzBhYmM5OWQ0LTgxMzktNDgwYi05M2QwLTFmZjg2ZmJh
MDRmMi5jcmwwHwYDVR0jBBgwFoAUtr0elBZYuPZPvXkacyzulsRrXuowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYWJjOTlkNC04MTM5LTQ4MGItOTNkMC0xZmY4
NmZiYTA0ZjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMANoYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGv0Jw5b1KbrPiQpFV42iPcGSTuMZRklQsFREi+FRsgvDEaeiEZy1uTcS
ZEvuiAqOcBXPoEzaZxLlD0/dmqk/trmR9/wykmRjDy3HtdnMI7iR/mnWxeDhfZQ2
CV6Cl08CY+xYXwp7N63NxxX1P4mt5tOs/781EKSkUXkU81/je82KESo/zOsV+7pr
+VuNFWO+OS2pxtXKCru/+gClLdbwyxqF06IGoBO4bj1jeL5BTlRPUvymJ8OctJzm
ZJ41b6YMKhVq9CyZ4dn6rrwnZlb/m2lbjuGL2d6Gix4g3zYpCm40bIYzUaj1nLzz
kU5ta68VHi9DoyslUxw3L0/p4zamOw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:00:28 2025 by rpki-client